Tagged “cve.org”
CVEs tagged cve.org, newest first.
47383 CVEsRSS
CVE-2026-55600Medium· 5.7PoCPart-DB: Stored HTML injection in BOM validation results via unescaped Part name
Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.2, Part-DB renders BOM validation information messages using Twig's |raw filter. These messages include translated placeholders popula…
CVE-2026-115537Medium· 4.3PoCgedelumbung HospitalManagement URL Validation routing_pages.php simpan redirect
A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This affects the function simpan of the file application/modules/admin/controllers/routing_pages.php of the component URL Va…
CVE-2026-115536Medium· 4.3PoCgedelumbung HospitalManagement Admin Routing routing_pages.php simpan cross site scripting
A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The impacted element is the function simpan of the file application/modules/admin/controllers/routing_pages.php of the …
CVE-2026-19678High· 8.7Server-Side Request Forgery (SSRF) Leading to Internal Solr Data Disclosure
A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensitive internal Apache Solr data via an attacker-controlled…
CVE-2026-19677Critical· 9.3Authentication Bypass Leading to Server-Side Command Execution
An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthenticated remote attacker to authenticate as an arbitrary tenant user, obtain TenantAdmin and Designer privileges, and…
CVE-2026-115485Medium· 6.3Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data without ensuring a NUL terminator is present, causing it to read past the buffer into heap memory. This can result in a…
CVE-2026-115535Low· 2.4PoCgedelumbung HospitalManagement Settings sistem.php simpan cross site scripting
A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the …
CVE-2026-115484High· 7.6Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same n…
CVE-2026-115486High· 7.1Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated uncond…
CVE-2026-113872High· 7.5PoCmulter vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown
multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown
CVE-2026-111181High· 7.5body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body
body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body
CVE-2026-114508Medium· 6.5Laravel relationship inclusion can trigger unauthorized data destruction
Laravel relationship inclusion can trigger unauthorized data destruction
CVE-2026-114437Medium· 4.8PoCchi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
CVE-2026-114060Low· 4.7SvelteKit: URL redirection to untrusted site via enhanced form submission
SvelteKit: URL redirection to untrusted site via enhanced form submission
CVE-2026-114050Medium· 6.5vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine
vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine
CVE-2026-113713Medium· 4.4PoCvirtualenv: Temporary app-data can leave dangling seed package links
virtualenv: Temporary app-data can leave dangling seed package links
CVE-2026-113714Low· 2.3PoCvirtualenv: Downloaded wheel selection and caching precede verification
virtualenv: Downloaded wheel selection and caching precede verification
CVE-2026-113717Low· 2.3PoCvirtualenv: Pip seeding with download omits wheel digest verification
virtualenv: Pip seeding with download omits wheel digest verification
CVE-2026-113719Medium· 4.5PoCvirtualenv: Seed replacement does not contain metadata deletion paths
virtualenv: Seed replacement does not contain metadata deletion paths
CVE-2026-113715Low· 2.0PoCvirtualenv: Venv configuration readback can reinterpret path boundaries
virtualenv: Venv configuration readback can reinterpret path boundaries
CVE-2026-113720Medium· 4.4virtualenv: Seeded files retain permissions from an older cache
virtualenv: Seeded files retain permissions from an older cache
CVE-2026-113718High· 7.1PoCvirtualenv: Xonsh activation literals depend on the script decoding codec
virtualenv: Xonsh activation literals depend on the script decoding codec
CVE-2026-113723High· 7.1PoCvirtualenv: Bash prompt values can change meaning under older compatibility modes
virtualenv: Bash prompt values can change meaning under older compatibility modes
CVE-2026-112906Medium· 4.7PoCfilelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse
filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse
CVE-2026-112914Medium· 5.3filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the…
filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory
CVE-2026-112937Medium· 6.1filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name
filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name
CVE-2026-112940High· 7.1PoCfilelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process over…
filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files
CVE-2026-110725Low· 3.7fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references
fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references
CVE-2026-110180Medium· 4.8fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization
fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization
CVE-2026-110095Low· 3.7fast-uri vulnerable to improper path equivalence in relative reference normalization
fast-uri vulnerable to improper path equivalence in relative reference normalization